5078 matches found
vLLM 代码问题漏洞
vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A code issue vulnerability exists in vLLM that stems from insufficient restriction of the target host for user-supplied URLs in the loadfromurl and loadfromurlasync methods of the MediaConnector...
PT-2025-40996
Name of the Vulnerable Software and Affected Versions Kibana versions 7.x through 7.17.29 Kibana versions 8.18.0 through 8.18.7 Kibana versions 8.19.0 through 8.19.4 Kibana versions 9.0.0 through 9.0.7 Kibana versions 9.1.0 through 9.1.4 Description A security issue exists in the Kibana CrowdStri...
PT-2025-41177
Name of the Vulnerable Software and Affected Versions vLLM affected versions not specified Description An issue exists within the MediaConnector class in the vLLM project’s multimodal feature set. Specifically, the load from url and load from url async methods do not sufficiently restrict the...
Elastic Kibana 安全漏洞
Elastic Kibana is an available data visualization dashboard software from Elastic. A security vulnerability exists in Elastic Kibana that stems from insufficient credential protection in the Crowdstrike connector, which could lead to credential disclosure...
Kibana - Crowdstrike Connector 8.18.8, 8.19.5, 9.0.8, and 9.1.5 Security Update (ESA-2025-19)
Kibana Insufficiently Protected Credentials in the CrowdStrike Connector ESA-2025-19 Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from an Elastic Crowdstrike connector in another...
📄 FortiWeb Fabric Connector 7.6.x SQL Injection
FortiWeb Fabric Connector versions 7.6.x suffer from a pre-authentication remote SQL injection vulnerability. Exploit Title: FortiWeb Fabric Connector 7.6.x - Pre-authentication SQL Injection to Remote Code Execution Date: 2025-10-05 Exploit Author: Milad Karimi Ex3ptionaL Contact:...
UBUNTU-CVE-2023-53571
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Make intelgetcrtcnewencoder less oopsy The point of the WARN was to print something, not oops straight up. Currently that is precisely what happens if we can't find the connector for the crtc in the atomic state. Get th...
CVE-2023-53571
The CVE-2023-53571 entry concerns the Linux kernel DRM/I915: the fix changes intel_get_crtc_new_encoder() to fetch the dev pointer from the atomic state instead of relying on a potentially NULL encoder, avoiding a WARN that could lead to an oops when a connector for the CRTC isn’t found in the at...
PT-2025-40713
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/i915 component related to handling encoder retrieval within the atomic state. Specifically, the intel get crtc new encoder function could lead to ...
EUVD-2022-33200
Malicious code in bioql PyPI...
EUVD-2023-32007
Malicious code in bioql PyPI...
EUVD-2024-52643
Malicious code in bioql PyPI...
EUVD-2023-48578
Malicious code in bioql PyPI...
EUVD-2021-7026
Malicious code in bioql PyPI...
EUVD-2023-31088
Malicious code in bioql PyPI...
EUVD-2022-0024
Malicious code in bioql PyPI...
EUVD-2025-8770
Malicious code in bioql PyPI...
EUVD-2023-49311
Malicious code in bioql PyPI...